Privacy Policy 1mdbet — Personal Data Protection for Malaysia Members

1 Information We Collect

1mdbet only collects information that is strictly necessary to provide a safe, fair, and seamless service to our members. We do not collect irrelevant or excessive data. Information is divided into two main categories:

Information You Provide Directly:

• Full name as per official identification document
• An active and reachable email address
• Mobile number registered in Malaysia
• Date of birth for minimum age verification
• National identification number (MyKad) or passport number
• Bank account or digital wallet details for transaction purposes
• Identity document image captured during the KYC process

Information Collected Automatically:

• Your IP address and network information when accessing the platform
• Device type, operating system, and web browser version used
• Game history, betting activity, and account activity on the platform
• Login and logout timestamps for your account
• Cookie and session data to maintain your login state

Data Category	Example Information	Primary Purpose
Identity	Name, MyKad, date of birth	KYC & age verification
Contact	Email, phone number	Communication & account security
Finance	Bank details, transaction history	Deposit & withdrawal processing
Technical	IP, device, session logs	Security & fraud detection
Behaviour	Game history, preferences	Personalise the user experience

2 How We Use Your Data

All information we collect is used for specific, legitimate purposes. We will not use your data for any purpose unrelated to the provision of 1mdbet services or that conflicts with applicable laws.

• Account management — enables you to register, log in, and securely access all platform features.
• Transaction processing — to process deposits, withdrawals, and bonus credit transfers accurately and promptly.
• Identity verification (KYC) — to confirm you meet the minimum age requirement and to identify duplicate accounts.
• Fraud prevention — to detect suspicious activity, unauthorised access attempts, and unusual betting patterns.
• Customer support — to provide effective assistance when you contact our support team.
• Legal compliance — to fulfil reporting obligations to regulatory authorities related to anti-money laundering (AML) compliance.
• Relevant marketing — to send promotional offers relevant to your interests and activity, provided you have consented to receive them.
• Platform improvements — to analyse usage patterns on an aggregated basis to improve service quality and user experience.

3 Data Sharing with Third Parties

1mdbet does not sell, rent, or disclose your personal data to third parties for their marketing purposes. However, there are limited situations where we may need to share certain information:

• Payment service providers — financial institutions, banks, and digital wallet providers that process your transactions. They receive only the minimum data required to complete the transaction.
• Game software providers — companies that provide casino, fish shooting, and bingo games to our platform. Shared data is limited to session IDs and betting information for calculation purposes.
• Cybersecurity providers — third-party services that help us detect threats, fraud, and cyberattacks against our platform.
• Regulatory authorities and law enforcement agencies — we will disclose required information when mandated by a court order or applicable Malaysian law.
• Analytics services — aggregated and anonymised data (with no personally identifiable information) is used for platform analytics to improve our services.

4 Cookies and Tracking Technologies

1mdbet uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit our site.

Types of Cookies We Use:

• Essential Cookies — required for core platform functions such as login, session verification, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies — to save your preferences such as preferred language, display theme, and browsing history for a smoother return experience.
• Analytics Cookies — helps us understand how members interact with the platform for improvement purposes. This data is aggregated and does not personally identify individuals.
• Security Cookies — used to identify suspicious activity, repeated login attempts, and potential security threats.

You can manage or delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality and your experience on the 1mdbet platform. Session cookies are automatically deleted when you close your web browser.

5 Data Security Measures

We continuously invest in security infrastructure to ensure your data is protected in the most comprehensive way possible. Data security is not just an add-on feature — it is the foundation of every part of the 1mdbet platform.

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Passwords are stored using strong one-way hashing algorithms — we cannot read your password ourselves
• Two-factor authentication (2FA) available and encouraged for all member accounts
• Real-time security monitoring 24 hours a day, 7 days a week
• Penetration testing by qualified independent parties at least once a year
• Role-based access control for internal staff — each employee only accesses data relevant to their role
• Comprehensive audit logs for every access to sensitive member data
• Tested incident response procedures for data breach scenarios

6 Your Rights as a Data Owner

As a 1mdbet member, you have important rights regarding your personal data. We fully respect and facilitate the exercise of these rights. Here are the rights you hold:

• Right to Access — you may request a copy of all personal data we hold about you in a readable format.
• Right to Rectification — if your data is inaccurate or outdated, you have the right to request an immediate correction.
• Right to Erasure — under certain circumstances, you may request that your data be deleted, subject to legal record-keeping obligations.
• Right to Restriction of Processing — you may request that we restrict how we use your data in certain situations.
• Right to Object — you may object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability — you may request your data in a structured format that can be transferred to another service provider.

To exercise any of the above rights, please contact our privacy team via email or live chat on the platform. We will respond within 30 business days and may require identity verification first for security purposes.

7 Data Retention Period

1mdbet retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. Our core principle is to never retain data longer than necessary.

• Active account data — retained for the duration of your membership and for 12 months after account closure.
• Financial transaction records — retained for a minimum of 5 years to meet Malaysia's financial compliance and AML legal requirements.
• KYC Documents — retained for 5 years from the date of verification or account closure, whichever is later.
• Security logs — retained for 12 months for security incident investigation purposes.
• Customer support communications — retained for 24 months for reference and quality assurance.
• Marketing data — deleted within 30 days after you unsubscribe from our marketing communications.

Once the designated retention period has expired, your data will be securely deleted or anonymised in accordance with procedures established by our data security team.

8 Child Protection

1mdbet strictly prohibits individuals under the age of 18 from registering or using our platform. We do not knowingly collect personal data from minors.

If we determine that a child's personal data has been collected without valid parental or guardian consent, we will take immediate action to delete that data and close the account in question. If you believe your child has registered an account with 1mdbet, please contact our support team immediately.

9 Changes to This Privacy Policy

1mdbet reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements.

When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document
• Sending a notification to your registered email at least 7 days before changes take effect
• Displaying prominent notices within the 1mdbet platform

Continued use of the 1mdbet platform after the effective date of any changes constitutes acceptance of the updated terms. If you do not agree with the changes, please contact us before the effective date to discuss your options.

10 Contact Our Privacy Team

If you have any questions, concerns, or complaints about how 1mdbet handles your personal data, our privacy and data security team is ready to assist you.

• Privacy email: [email protected]
• Live support: Live chat within the 1mdbet platform — available 24 hours a day
• Response time: Within 3 business days for general enquiries; 30 business days for formal data rights requests

We are committed to resolving every privacy-related complaint fairly and transparently. If you feel your concerns have not been adequately addressed, you have the right to escalate the matter to the relevant data protection authority.